Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E20EF30062C11EFA1B8DE39017001B1.roa
File: 7E20EF30062C11EFA1B8DE39017001B1.roa (raw, json)
Hash identifier: blKahtM1JTGIjXNQ3pjvZyk46N6rtA1pGmBs/5nIeZ0=
Subject key identifier: 36:27:92:96:04:FE:10:74:CB:EE:3E:8A:DB:48:26:88:8E:35:2B:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B274
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E20EF30062C11EFA1B8DE39017001B1.roa
Signing time: Mon 29 Apr 2024 13:29:24 +0000
ROA not before: Mon 29 Apr 2024 13:29:20 +0000
ROA not after: Fri 07 Jun 2024 13:29:20 +0000
asID: 138915
IP address blocks: 154.223.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45684 (0xb274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 13:29:20 2024 GMT
Not After : Jun 7 13:29:20 2024 GMT
Subject: CN=662fa0b4-2d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:0f:9e:62:3b:03:24:2a:9b:de:9d:4a:cf:
17:bd:77:d2:35:d3:55:b8:b4:fa:a4:b0:6f:35:53:
54:45:29:71:83:5a:3d:16:5c:0f:ed:97:98:69:dd:
11:e1:6f:5d:b4:71:d3:ce:da:a7:ad:07:82:42:cf:
2e:80:7e:b2:43:40:c6:99:bd:a2:68:5f:99:82:49:
dd:10:ab:4b:82:eb:70:b8:ab:d1:d0:77:ce:59:bb:
d8:eb:ab:59:80:d9:99:93:43:99:7d:5b:ad:bb:db:
03:f5:8e:69:cb:96:51:57:08:fe:bc:86:57:b7:43:
83:b0:21:1e:07:3c:37:57:fc:8a:3b:eb:e2:d3:66:
e9:01:6b:14:cc:cb:b5:1f:22:0d:54:6c:93:a0:6f:
e2:81:a3:e3:66:5b:88:20:6e:99:9d:3b:75:c5:a3:
c3:35:c4:2c:37:55:95:d6:05:c8:d7:0e:93:16:be:
d3:b2:9b:04:59:bd:ff:a8:2c:6f:1a:2e:fd:21:4f:
42:f4:53:21:0a:72:2f:60:8e:c9:2b:06:1f:ad:e6:
f5:fc:a0:65:5b:31:a3:62:2d:73:50:d4:f2:b0:0c:
71:e7:25:08:bb:49:13:e0:b2:76:34:63:78:ba:78:
7f:59:90:68:22:c1:a1:6c:2c:43:e5:b3:b7:a9:92:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:27:92:96:04:FE:10:74:CB:EE:3E:8A:DB:48:26:88:8E:35:2B:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E20EF30062C11EFA1B8DE39017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.45.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:8a:f7:17:3f:0d:e7:88:5c:08:5b:16:d8:ff:8d:62:6b:ee:
ac:e1:02:ec:c7:9a:28:15:39:d5:1a:bf:1f:d1:ab:50:82:0f:
97:4c:88:6c:0a:17:4f:e1:56:8b:dc:2b:2a:80:25:88:1f:9e:
f3:da:ba:7b:3d:a1:23:18:a3:dc:7f:e5:d7:51:88:f8:b3:c5:
80:9b:35:05:d3:57:ef:48:19:7c:19:21:77:94:f9:12:86:34:
b5:3f:ef:43:03:3b:9d:36:eb:94:01:ac:69:a4:1b:6d:70:c6:
08:57:0a:4b:80:76:ff:e3:a3:7c:2f:88:62:85:43:59:b3:bf:
6c:1b:f7:53:14:30:1f:44:82:e9:78:76:a6:68:10:56:c2:c1:
45:b5:5a:0c:c9:a3:dd:74:2b:58:d2:dc:9d:dd:96:fe:06:65:
c5:f8:88:f3:15:87:1a:86:f1:60:05:5f:8b:ef:61:48:ba:53:
9d:c8:eb:c5:46:b4:be:68:60:9a:9a:e6:8e:d2:fd:d4:6e:c5:
91:22:f8:a8:9f:f8:e3:f0:cb:a3:00:a3:3d:82:03:65:40:ae:
f1:e3:c3:e4:a4:f7:b8:bc:6e:a7:6d:c7:be:94:89:49:11:26:
53:99:f6:53:12:1c:60:51:4e:06:6e:20:8a:14:59:e2:f3:4c:
f2:ca:fe:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALJ0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI5MTMyOTIwWhcNMjQwNjA3MTMyOTIwWjAYMRYw
FAYDVQQDEw02NjJmYTBiNC0yZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyMUPnmI7AyQqm96dSs8XvXfSNdNVuLT6pLBvNVNURSlxg1o9FlwP7ZeY
ad0R4W9dtHHTztqnrQeCQs8ugH6yQ0DGmb2iaF+ZgkndEKtLgutwuKvR0HfOWbvY
66tZgNmZk0OZfVutu9sD9Y5py5ZRVwj+vIZXt0ODsCEeBzw3V/yKO+vi02bpAWsU
zMu1HyINVGyToG/igaPjZluIIG6ZnTt1xaPDNcQsN1WV1gXI1w6TFr7TspsEWb3/
qCxvGi79IU9C9FMhCnIvYI7JKwYfreb1/KBlWzGjYi1zUNTysAxx5yUIu0kT4LJ2
NGN4unh/WZBoIsGhbCxD5bO3qZItIwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDYn
kpYE/hB0y+4+ittIJoiONSuWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RTIwRUYzMDA2MkMxMUVGQTFCOERFMzkwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8tMA0GCSqGSIb3DQEB
CwUAA4IBAQC8ivcXPw3niFwIWxbY/41ia+6s4QLsx5ooFTnVGr8f0atQgg+XTIhs
ChdP4VaL3CsqgCWIH57z2rp7PaEjGKPcf+XXUYj4s8WAmzUF01fvSBl8GSF3lPkS
hjS1P+9DAzudNuuUAaxppBttcMYIVwpLgHb/46N8L4hihUNZs79sG/dTFDAfRILp
eHamaBBWwsFFtVoMyaPddCtY0tyd3Zb+BmXF+IjzFYcahvFgBV+L72FIulOdyOvF
RrS+aGCamuaO0v3UbsWRIvion/jj8MujAKM9ggNlQK7x48PkpPe4vG6nbce+lIlJ
ESZTmfZTEhxgUU4GbiCKFFni80zyyv7G
-----END CERTIFICATE-----
Generated at Sat May 18 04:03:47 2024 by rpki-client on console-ams.rpki-client.org